login into horizon behind firewall

i have DevStack in a Hyper-V VM environment with a Firewall. I can get to the gui through nat/fw rule. but i cant log in. BUT i can login from with in the vm network, the password is dead simple and works inside but not outside. Does this have to do with dns or local.conf or openrc ? im thinking becouse from outside im hitting a diff IP since nat and tha somehow gets messed up

also where are the logs for all this ?

/opt/stack/logs

doesn't seem to be helpful im probably looking at this wrong
is HAproxy involved here >?